ThreatExpert's Statistics for Virus.Win32.Crypt.CIR [Ikarus]:

Virus.Win32.Crypt.CIR [Ikarus] is also known as:

Threat Alias	Number of Incidents
Backdoor.Win32.Agent.gjs [Kaspersky Lab]	7
Mal/Behav-024, Mal/Emogen-Y [Sophos]	6
Infostealer [Symantec]	5
Backdoor.Agent!sd6 [PC Tools]	4
Generic BackDoor [McAfee]	4
Backdoor.Trojan [Symantec]	2
Spy-Agent.bg [McAfee]	2
Backdoor.Agent!ct [PC Tools]	1
BKDR_AGENT.AJAT [Trend Micro]	1
Generic Packed [McAfee]	1
Mal/Behav-004, Mal/Behav-024, Mal/Emogen-Y [Sophos]	1
P2P-Worm.Win32.Bacteraloh.h [Kaspersky Lab]	1
PE_SALITY.AL-1 [Trend Micro]	1
Trojan.Agent!sd5 [PC Tools]	1
Trojan.Win32.Agent.jax [Kaspersky Lab]	1
Virus:Win32/Sality.T [Microsoft]	1
W32.Sality.X [Symantec]	1
W32/Sality.z [McAfee]	1
W32/Sality-AD [Sophos]	1
Win32.Sality.AA [PC Tools]	1

Virus.Win32.Crypt.CIR [Ikarus] is known to be created as:

%UserProfile%\xrt_glut.exe

%UserProfile%\xrt_kuyl.exe

%UserProfile%\xrt_nlio.exe

%UserProfile%\xrt_nueq.exe

%UserProfile%\xrt_qfdu.exe

%UserProfile%\xrt_qhkd.exe

%UserProfile%\xrt_rxby.exe

%UserProfile%\xrt_wbig.exe

Note: %UserProfile% is a variable that specifies the current user's profile folder. By default, this is C:\Documents and Settings\[UserName] (Windows NT/2000/XP).